On March 7, 2023, the Brazilian National Telecommunications Agency (ANATEL) published Bill No. 2436 on its website. The purpose of the Act is to establish a mandatory set of enforceable minimum cybersecurity requirements (password strength, data sharing, vulnerability updates, etc.) to assess the compliance of the following user-end devices for general public use that connect users to Internet services. Typical equipment includes modems, routers, and wireless access points.

The new regulations will come into force on March 10, 2024. Click on this link to view the original document.